Privacy policy

This policy explains how Solsentra Pty Ltd (Solsentra, “we”) handles personal information collected through this website. We follow the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). How we handle client data during an engagement is covered by our service agreements.

What we collect

• Enquiries and review bookings: your name, work email, phone number, company, company size, the services you are interested in, how you would like to be contacted, and your message.
• Incident line form: your name, phone number, email, company, the type of incident and your description.
• Cyber health check: your answers and score, and, if you ask for the report, your email, name, company and whether you would like a call. Answers you do not send stay in your browser.
• Technical information: with each form submission we record the page it was sent from, your browser type and a keyed, irreversible hash of your IP address, so we can detect abuse. Our web server’s access logs keep only part of your IP address (the network, not the device), for security. We do not store your full IP address.

This website does not use advertising or tracking cookies, and it does not load third-party trackers. [CONFIRM: if you turn on privacy-friendly analytics, name the provider here and state that it sets no cookies.]

Why we collect it

To reply to you, arrange and deliver the refinement or service you asked for, respond to a security incident, keep the website secure, and meet our legal obligations. We will only send you marketing with your consent, and every message includes an easy way to opt out.

Who we share it with

We do not sell personal information. We share it only with service providers who help us run the business, such as our database hosting, email delivery and customer management providers, under contracts that require them to protect it, and where the law requires.

Some of these providers may store or process information outside Australia, for example in the United States. [CONFIRM: list your providers and countries.] Before disclosing information overseas we take reasonable steps to ensure the recipient handles it consistently with the APPs.

How we protect it

Form submissions travel over encrypted connections and are stored in our enquiries database, hosted by [CONFIRM: provider, for example MongoDB Atlas] in [CONFIRM: region, for example Sydney, Australia], encrypted at rest. Only staff who handle enquiries can read them, with multi-factor authentication and access logging. Records used only to stop abuse, such as hashed network addresses and single-use form tokens, are deleted automatically within two days.

How long we keep it

We keep enquiry information for as long as needed to respond and to manage any resulting relationship, and generally no longer than [CONFIRM: 24 months] after our last contact, unless the law requires us to keep it longer. Website security logs are kept for [CONFIRM: 90 days].

Access, correction and complaints

You can ask to see or correct the personal information we hold about you by emailing privacy@solsentra.au. We will respond within 30 days.

If you have a concern about how we have handled your information, email us first and we will try to resolve it within 30 days. If you are not satisfied, you can contact the Office of the Australian Information Commissioner.

Data breaches

If we have a data breach that is likely to result in serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.

Automated decisions

We do not use computer programs to make decisions about you that could significantly affect your rights or interests. The health check score is calculated in your browser to show you your own results; it is not used to make decisions about you.

Changes to this policy

We will update this page when our practices change. The date it was last updated is shown at the top.